<!-- One iframe's popstate handler removes another iframe from the
     document during a history navigation that affects both frames.  The
     history navigation selects the same document in both frames.

     Should not crash. -->

<script>
  if (window.testRunner) {
    testRunner.dumpAsText();
    testRunner.waitUntilDone();
  }

  window.onload = function () {
    frames[0].history.pushState("first", "first");
    frames[0].onpopstate = function () {
      document.body.innerHTML = "PASS";
      if (window.testRunner)
        testRunner.notifyDone();
    };
    frames[1].history.pushState("second", "second");

    history.go(-2);
  }
</script>

<body>
  NOT TESTED
  <iframe src="resources/empty-subframe.html"></iframe>
  <iframe src="resources/empty-subframe.html"></iframe>
</body>
